Fleuret raises €3.5M to industrialize agentic AI pentesting
A European seed round to make pentesting continuous, fast and affordable. Webapp, API and external infrastructure today. Cloud, Active Directory and mobile coming in 2026.
Yanis Grigy and Augustin Ponsin, founding team
What we're announcing
We're raising €3.5M to accelerate Fleuret, an offensive security platform driven by agentic AI. The round includes €2.8M in equity, led by RAISE Capital alongside Auriga Cyber Ventures and Wind Capital, backed by a circle of operator angels from European cybersecurity. On top of that, a €700k Bpifrance innovation loan.
Funds close mid-May 2026. They fund product, team and the scopes our customers need for NIS2, DORA and ISO 27001.
Why now
European CIOs ship every day. Pentest firms deliver in 2 to 4 weeks, at €10,000 and up, once or twice a year. Between audits, 3 to 12 months of blind exposure. The math no longer works. Fleuret delivers human-grade pentests in hours, with reproducible PoC and audit-ready reports, at €2,500 per scope. Zero false positives tolerated.
What this round funds
Product
Webapp, REST and GraphQL APIs, external infrastructure in production. Cloud, Active Directory and mobile in alpha with our design partners, production-ready in 2026.
Team
Scaling from 5 to roughly 12 people by end of 2026: four security and product engineers, one to two sales hires, Paris-based.
Distribution
Direct go-to-market to European CISOs, CTOs and DPOs, plus partnerships with cyber insurers and specialized firms. EU hosting (fra1), data residency in Europe.
Our investors
RAISE Capital leads. Auriga Cyber Ventures and Wind Capital co-invest.
Business angels
Operators who built European cybersecurity: founders of Almond, GitGuardian, Stoïk, OVRSEA and Hornetsecurity. Their customer network, product expertise and operator experience compress years of learning for us.
NIS2, DORA, ISO 27001
Every Fleuret report maps findings to the frameworks your auditors expect. NIS2 directive and DORA regulation require recurring penetration tests. Fleuret makes it a continuous operation, not a yearly project.
Just the beginning
If you're a CISO, CTO, DPO or executive at a European company of 50 to 1,000 employees, we want to talk. Book a 30-minute demo with a founder.


